I think it's fine to switch to /dev/urandom, but it's not something that we control. The entropy source is either set via a system property (set via tomcat.conf for example) or within $JAVA_HOME/jre/lib/security/java.security. Neither of those methods are things within the control of the Candlepin RPM. Configuring the settings in those files is more an issue for the Katello installer, so I'm reassigning to that component.
Be forewarned that are are some issue with JVM's not respecting what's set in java.security. See
http://bugs.java.com/view_bug.do?bug_id=6202721

Note

You need to
log in
before you can comment on or make changes to this bug.